salt is not a constant and should not be

nextcloud / end_to_end_encryption_rfc

🔒 Specification for end-to-end encryption used by Nextcloud sync & mobile apps

Other

31 stars 15 forks source link

salt is not a constant and should not be #31

Closed MaxFichtelmann closed 5 years ago

MaxFichtelmann commented 5 years ago

The description of the the RFC regarding the salt used by the private key encryption seems to be incorrect. Implementations suggest that the salt is actually a generated value of 40 bytes, stored alongside the encrypted private key.